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IF YOU'VE EVER HAD THE FEELING THAT 
someone was illegally bugging your 
conversations, you were probably at a 
loss at how to find out for sure. Sig- 
nal-detection equipment is expensive, 
and paying a professional to sniff out 
bugs is even more so. Here we show 
you how to build an RF detector that 
can locate low-power transmitters 
(bugs) that are hidden from sight. It 
can sense the presence of a Il-mW 
transmitter at 20 feet, which is sen- 
sitive enough to detect the tiniest bug. 

As you bring the RF detector closer 
to the bug, more and more segments 
of its LED bargraph display light, 
which aids in direction finding. Fur 
thermore, our bug buster costs less 
than $60 to construct, and is more 
effective than most high-priced 
gadgets to be found in flashy mail- 
order catalogs. 


Little-known ability 

Enter the cloak and dagger world of 
counter-surveillance electronics. Fre- 
quency counters have been used for 
years by the federal government, and 
police agencies for security work. 
You see, counters have the little- 
known ability to pick up and display 
the frequency of a hidden transmitter. 

Our bug buster was developed to 
solve a problem that law-enforcement 
personnel were having when using 
frequency counters to locate bugs. A 
sensitive frequency-counter with an 
antenna input will continuously dis- 
play random numbers caused by the 
counter’s own oscillating circuitry. 
Nontechnical users tend to stare into 
the meaningless display, attempting 
to interpret the constantly changing 
numbers. Of course, the counter 
locks in solid when a real signal is 
present. 

The bug buster is a frequency coun- 
ter that doesn’t self-oscillate, and is 
useful when knowing the bug’s trans- 
-mitter frequency is unimportant. As a 
field-strength meter, it will respond as 
the distance to the RF transmitter 
changes, allowing any bug to be pre- 
cisely located. 


Circuit theory 

As shown in Fig. 1, the front end 
has a two-stage wideband RF ampli- 
fier, and a forward-biased hot-carrier 
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Our hand-held “bug” buster can 
sniff-the-airways like a trained bloodhound. 
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diode for a detector. After detection, 
the signal is filtered and fed to IC1, a 
LM3915N bar-graph driver having a 
logarithmic (log) output; that means 
each successive LED segment repre- 
sents a 3-dB step, which helps display 
the wide dynamic-range signals that 
the bug buster will encounter. 

The front-end RF amplifiers are 
wideband Monolithic Microwave Jn- 
tegrated Circuit (MMIC) devices 
from Mini-Circuits, PO Box 350166, 
Brooklyn, NY 11235-0003: (718) 
934-4500. They have 50-ohm input 
and output impedances from DC to 
2000 MHz. The gain is 20 dB through 
500 MHz, dropping to 11 dB at 2000 
MHz. The amplifiers are surface 
mounted on a .1” wide microstrip 
lead. Surrounding the amplifiers are 
surface-mounted coupling capacitors, 
standard (current limiting) resistors, 
decoupling capacitors, and chokes. 
Chip components were selected based 
on information supplied in the Mini- 
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Circuits Publication entitled, A handy 
“how-to-use”’ guide for MAR mono- 
lithic drop-in amplifiers. The ampli- 
fiers perform exactly as described by 
the manufacturer; the agreement with 
specifications is really quite good. 

The input-sensitivity plot is shown 
in Fig. 2. Up to five amplifiers were 
connected in series in an attempt to 
increase the front-end sensitivity 
down to the level of a few microvolts. 
Although using more amplifiers does, 
in fact, increase apparent sensitivity 
when tested by a signal generator, the 
effective transmitter detection range 
does not increase. That’s because the 
amplifiers are wideband, and have no 
tuning; therefore, increased ampli- 
fication is applied across the entire RF 
spectrum. The signal being measured 
in the real world must appear larger 
than the RF noise background in order 
to be detected. In conclusion, a gain 
of about 40 dB was found to work best 
for detecting hidden transmitters. 
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FIG. 1—_THE RF FRONT-END USES MMIC wide-band amplifiers, and a hot-carrier diode 


detector. 


FIG. 2—THE INPUT RF-SENSITIVITY is greatest between 10 an 
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between 700 MHz and 1300 MHz, and remains almost constant out to 2500 MHz. 


To ensure stable operation without 
having to constantly re-adjust the full- 


scale or zero-adjust potentiometers, 
voltage regulator IC4, an LM317T, is 


programmed for approximately 6 
volts by R6 and R7. A 9-volt alkaline 
battery supplies the regulator. 

Figure 3 shows the block diagram 
of the LM3915, consisting of a re- 
sistor-divider network and a chain of 
op-amp comparators. The output of 
each comparator is open (no current 
in or out) when the noninverting input 
is higher than the inverting input; the 
output goes low (sinking current) 
when the inverting input is higher. 
Each comparator controls a single 
LED segment, which lights when the 
comparator’s output is low. 

The noninverting inputs can be 
considered as reference inputs. The 
resistor string has log-weighted val- 
ues, so that the current flowing from 
pin 6 to pin 4 generates the appropri- 
ate reference voltages at each of the 
ten comparator inputs. Those ten volt- 
ages always maintain the same rela- 
tive relationship even when the 
reference voltage changes. The signal 
input is buffered (amplified with a 
voltage gain of 1) to prevent loading 
the source. As the signal input in- 
creases between the reference low and 
reference high voltages, each com- 
parator will change state as its nonin- 
verting voltage is exceeded. 

The LM3915 has an internal 1.25- 
voit reference source. Trimmer R10 
will adjust the reference voltage ac- 
cording to this formula: 


Vaer n= 1-25 (1+ nto) + R2 lang 


The I, current is internally set to 
be less than 120 pA, while the LED 
brightness is controlled by the refer- 
ence current out of pin 7. The current 
through each LED segment is equal to 
ten times the current through R9 and 
R10; therefore, changing R9 and or 
R10 will change the LED brightness. 

Switch $2 programs the LM3915 
for either a bar or a spot display. The 
spot display conserves battery life be- 
cause only one segment is on at any 
given time; however, the bar display is 
more pleasing visually. 

The siG IN voltage is the sum of the 
bias voltage on detector diode D1, 
plus any rectified and filtered RF from 
the input amplifiers IC2 and IC3. To 
offset the bias voltage, a low-voltage 
reference is generated by R4, D2, and 
Ril; it should track the bias voltage 
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FIG. 3—INSIDE THE BARGRAPH DRIVER 
is a series of op-amp comparators driving 
a LED bargraph. 


despite temperature changes, while 
capacitor C3 bypasses any RF to 
ground. 


Construction 

Figure 4 shows the parts placement 
for the bug buster’s double-sided PC 
board. A plated-through silk- 
screened G10 glass-epoxy board is 
available from the source listed in the 
parts list, or you can etch your own 
using the artwork provided in “PC 
Service.” 

In Fig. 5, the MMIC surface- 
mounted amplifiers and chip capaci- 
tors require a little extra care during 
installation. They can be hand-sol- 
dered with a small-tipped iron, but 
must not be oyerheated—and watch 
out for solder bridges. The LM3915 
bargraph-driver IC (ICl), the two 
trimmer potentiometers (R10, R11), 
and the two slide switches (S1, S82), 
all install on the solder side (also re- 
ferred to as the far side) of the PC 
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board. All remaining components in- 
stall on the silk-screen printed side of 
the PC board. Holes are not provided 
in the microstrip for component leads; 
just solder the leads directly on top. 
Be sure to check polarity on the elec- 
trolytic capacitor, and the two diodes. 

The LM317T bolts to the PC board 
without any insulator. Solder the bat- 
tery leads to the appropriate locations 
labeled red and black. The BNC con- 
nector was modified with a 0.06" 
grove to fit in the PC-board cut out. 
Solder the BNC connector to both 
sides of the PC board as well as sol- 
dering the BNC center-pin to the foil 
trace. Snap on a 9-volt battery and 
you're ready. 


Calibration 
The BNC-mounted telescoping-an- 
tenna is convenient and works well in 
the 100-MHz to 470-MHz range 
where the majority of all bugs oper- 
ate. To increase sensitivity to other 
frequencies, you have to use an anten- 
na specifically for that service. 
_ continued on page 50 


FIG. 4—THIS IS THE PARTS-PLACEMENT 
DIAGRAM. Opposite the side that’s silk 
screened is the solder side—calied the far 
side. Install the components on the cor- 
rect side, with the polarity in the right di- 
rection. 
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video gain, and bandwidth, R37 pro- 
vides feedback around the modulator; 
however, R33 sets the exact Q-point 
(voltage seen at point A, Q12’s emit- 
ter), under zero-drive conditions at 
about 5- to 6-volts DC, to Q6 and Q7. 
R33 is adjusted for maximum un- 
distorted symmetrical video at point 
A, while R32 controls video drive to 
Ql. Supply bypassing must be effec- 
tive at Q12’s collector due to the high 
current and fast waveforms handled. 
The main supply bypass, C44, a 
10-wF, 15-volt, tantalum chip was 
used because standard electrolytics 
are somewhat less effective. 


Power feed 

DC power is fed to the transmitter 
at J4. Diode D4, a 1N4007, is pro- 
vided to serve as reverse-polarity pro- 
tection. It’s cheap insurance against 
inadvertent damage to Q6, Q7, Q10, 
QIl, and Q12, should the negative 
and positive leads of the power supply 
be reversed by accident. Diode D1 is 
connected directly across J4. The 12- 
volt supply (11-14 V is OK) may come 
from Nickel-Cadmium batteries, an 
auto’s electrical system, or any kind 
of AC-operated power supply. 


Audio feed 

Audio is fed to gain control R22 
from jack J3. Input level should be 
between 10 mV and 1} volt at high 
impedance, allowing direct interfac- 
ing with most microphones, or other 
audio sources. From R22 the audio is 
coupled through C35 to Q8, which is 
biased from R23, R24, and R25. By- 
pass C36 will prevent audio degener- 
ative feedback, and loss of gain. 
Collector-load R26 supplies DC to 
Q8, while C37 blocks DC and cou- 
ples audio through R27 to the fre- 
quency modulator. 

Note that no pre-emphasis (high- 
frequency boost) has been used. If 
you want to use it, for better high- 
frequency audio response, change 
C37 to 0.001 pF and set the gain- 
control R22 up higher to compensate 
for loss. The author found that pre- 
emphasis was unnecessary for most 
applications. 

Audio is coupled to the varactor- 
diode D2, an MV2112, where R29 


biases D2 at 9 V. The varactor diode 
varies its capacitance at an audio rate 
from 56 pF at 4 V, to about 33 pF at 9 
V. The capacitance of D2 appears 
across 4.5-MHz oscillator coil L14. 


Then, Q9, an MPFIO2 FET, together 
with C41, C42, C40, and L14 form a 
Colpitts RF oscillator operating at 4.5 
MHz. Trimmer C40 is used to set the 
frequency to exactly 4.5 MHz, while 
toroidal coil L14 is used to minimize 
stray magnetic field generation. 

The audio voltage on the DC bias 
causes D2 to change capacitance, 
which shifts the oscillator frequency 
causing frequency modulation (FM) 
ot the 4.5-MHz generated in Q9, the 
Colpitts oscillator. Bias for Q9 is pro- 
vided by R30, while R31 couples the 
audio subcarrier (4.5-MHz FM) into 
the video amplifier, which modulates 
it and the video onto the RE 

Zener-diode D1, R28, and C38 and 
C39 (which provide bypass) supply a 
regulated 9-V DC voltage to Q9, and 
varactor D2. The regulation prevents 
oscillator drift if the supply voltage 
were to vary. A frequency counter can 
be connected to point A to set C40 to 
exactly the value needed for 4.5-MHz 
audio subcarrier. 

Looks like we’ve run out of space. 
Next month we’ll focus on construction 
techniques, like how to wind coils, how 
to solder tantalum-chip capacitors, and 
circuit modifications. R-E 
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integrated Circuit (MMIC) looks like a tiny 
dot with microstrip leads. 


Put the PC board into its cabinet, 
and install the antenna before making 
any adjustments. Start with the zero- 
adjust set counter-clockwise, and the 
full-scale adjust set clockwise. 

To properly calibrate our bug bust- 
er, a low-power transmitter is needed. 
A cordless-telephone handset is ide- 
al. (Cordless phones are in the 40- 
MHz to 60-MHz region, and radiate 
less than most bugs!) Set the zero 
adjust until the left-most segment is 
about to come on. Set the full-scale 
adjust until all segments are lit when 
placed next to the cordless phone. 


At, R2—220 ohms, ¥o-we 
R3, R4—2430 ohms, 1% : 
~RS-—510 ohms. oo 
R6—-240 ohms 
R7—-1000 ohms 
R8&—100hms 
R9—47,500 ohms, fe 
RIO, R11—-5000-ohm trimmer 
potentiometer — 


Capacitors a 


- monolithic ceramic. : : 
C6-C8—1000 pF, ceramic chip 
(C4220 uF, 16 volt, Soe 


Semiconductors - oo 
iC1—LM3915N, log- baroraph 
display driver 
1C2, IC3—Mini- Circuits, Inc., MARS, 
- MMIC. 

-1C4—-LM317T, voltage reguiaton 


Di, D2—FH1100, hot-carrier diode oo . 


Some hints 

You are now ready to put your bug 
buster to work. To effectively sweep a 
room, you need to get familiar with 


Other cor 
DSP1-—-RGB 1000, 10-segment . 
bargraph display 

_ Jt--CP1004 moditied, BNC 

= connector 
Miscellaneous a 
_ Cabiner esol, cable, and baker . 


ponent 


clip. 


Notes: A complete set of all parts 


_ except cabinet for $59.95; cab- _ 


Inet is $20; telescoping BNC an- 

_ 01-03, C5, C9, cio—0. 01 oF a volt tena $12; lined zipper carrying- 

case $10; PC board only $25; all _ 

__IC’s and bargraph $30. Order — 
from: Optoelectronics, Inc. 5821. 


NW. 14th Avenue, Fort Lauder- 


dale, FL 33334; phone (800) 


327-5912, in FL (305) 771-2050. - 


- Add $3.50 for shipping; FL ad- _ 
dress include 6% state sales tax. 
Master card and Visa pidge. 
must be over $20. : 


your bug buster’s operating charac- 
teristics in as many situations as pos- 
sible. Be sure to leave the power 
switch off when not in use. R-E 


